55 mins ago
Hugging Face malware campaign returns to hijack GPUs for crypto mining
What's happening
SignalsMonitor is following this as a security story. BleepingComputer is the outlet attached so far. The first report grouped here was at 29 Oct 2026, 22:09 UTC. The headline in use is “Hugging Face malware campaign returns to hijack GPUs for crypto mining”. This note is SignalsMonitor's own briefing, not the publisher's article.
What we know
A crypto-mining campaign abusing Hugging Face models returned days after takedown, hijacking GPU servers and planting backdoors, with one model downloaded over 28,000 times. Separately, a fake Solana starter kit on GitHub is positioned to trick AI coding agents into installing a NetSupport RAT.
Story timeline
Reports grouped into this story, earliest first. Exact repeats from the same outlet are collapsed.
- First reported by BleepingComputer
Hugging Face malware campaign returns to hijack GPUs for crypto mining
Reported by 1 outlet
- BleepingComputer